Skip to content
OpenAdvisories

Archive

25 March 2008

Vulnerabilities first published on this day (UTC), newest first.

← February 2008 2008 / March /25 April 2008 →
  1. 1 
  2. 2 
  3. 316
  4. 424
  5. 515
  6. 637
  7. 7 
  8. 813
  9. 95
  10. 1055
  11. 1122
  12. 1226
  13. 1319
  14. 147
  15. 15 
  16. 16 
  17. 1724
  18. 1839
  19. 1915
  20. 2047
  21. 21 
  22. 22 
  23. 23 
  24. 2442
  25. 2527
  26. 2613
  27. 2717
  28. 2820
  29. 29 
  30. 30 
  31. 3137
All Critical High Medium Low Exploited only Public exploit

27 results · Feed

  • Unscored —
    CVE-2008-1509 Public exploit

    SQL injection vulnerability in index.php in XLPortal 2.2.4 and earlier allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-1512 Public exploit

    Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB all…

  • Low —
    CVE-2008-1510 Public exploit

    Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter

    Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2008-1513 Public exploit

    SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enable…

  • Unscored —
    CVE-2008-1508 Public exploit

    SQL injection vulnerability in EfesTech E-Kontör and earlier allows remote attackers to execute arbitrary SQL commands …

  • Critical 9.8
    CVE-2008-1511 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2008-1507 Public exploit

    PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@p…

  • Unscored —
    CVE-2008-1506 Public exploit

    PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to php…

  • Unscored —
    CVE-2008-1496 Public exploit

    Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-1499 Public exploit

    Cross-site scripting (XSS) vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote at…

  • Unscored —
    CVE-2008-1490

    Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and…

  • Unscored —
    CVE-2008-1493 Public exploit

    Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arb…

  • Unscored —
    CVE-2008-1503

    Cross-site scripting (XSS) vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to …

  • Unscored —
    CVE-2008-1491 Public exploit EPSS 70%

    Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 a…

  • Unscored —
    CVE-2008-1501 Public exploit

    The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and …

  • Unscored —
    CVE-2008-1492 Public exploit

    Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and …

  • Unscored —
    CVE-2008-1497

    Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated user…

  • Unscored —
    CVE-2008-1494

    SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-1505 Public exploit EPSS 46%

    PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Jo…

  • Unscored —
    CVE-2008-1500 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject a…

  • Unscored —
    CVE-2008-1495 Public exploit

    Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote aut…

  • Medium —
    CVE-2008-1502 EPSS 11%

    Moodle vulnerable to Cross-site scripting

    The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a st…

    moodle/moodle wordpress Debian Packagist
  • Unscored —
    CVE-2008-1498 Public exploit

    Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated use…

  • Unscored —
    CVE-2008-1504 Public exploit

    Cross-site scripting (XSS) vulnerability in setup.php3 in phpHeaven phpMyChat 0.14.5 allows remote attackers to inject …

  • Unscored —
    CVE-2008-1092 EPSS 26%

    Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-1160 Public exploit EPSS 15%

    ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a …

  • Unscored —
    CVE-2008-1489 Public exploit EPSS 12%

    Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial …

    vlc Debian